If you believe someone has accessed your phone, email, photos, or location without permission, start with the official support provider for the affected account or device. Not every unusual alert or device behavior is evidence of hacking, and it is rarely possible to identify a responsible person from symptoms alone.
First: consider your safety
If the concern involves a partner, ex-partner, or family member, changing passwords or location sharing may alert them. If you fear retaliation, seek help from a trusted device before changing settings. The National Domestic Violence Hotline provides confidential support in the U.S. at 800-799-SAFE (7233), or text START to 88788. See its internet safety advice. For immediate danger, call 911 or your local emergency number. The FTC also explains stalkerware risks and safety considerations.
Contact the provider that manages your account or device
Apple: iPhone, iPad, Mac and iCloud
Use Apple's compromised account guidance or Apple Support. Review trusted devices, passwords, recovery settings and unfamiliar access. Apple's Personal Safety User Guide covers sharing and unwanted tracking. On supported iPhones, Settings > Privacy & Security > Safety Check helps review shared access. Consider safety before changing it.
Microsoft: Windows, Outlook, Hotmail and OneDrive
Start with Microsoft Support and its account recovery instructions. Review sign-in activity, recovery methods and unexpected email forwarding rules.
Google: Gmail, Android, Google Photos and Google Account
Follow Google's compromised account instructions. Check unfamiliar devices, security events, recovery methods and two-step verification. For Android devices, see Android Help or the manufacturer's support site.
Facebook, Instagram and other social platforms
Use the affected platform's official recovery and security tools. Facebook offers facebook.com/hacked. Review active sessions and account recovery details when you regain access.
Mobile carrier or bank
For suspected SIM or phone-number access, contact your mobile carrier through its official app, website or store. For unauthorized transactions, contact your bank or card issuer's fraud department immediately through a verified channel.
Seven practical steps to secure your accounts
When it is safe to make changes, use a trusted device and:
- Secure your primary email account and inspect recovery contacts and forwarding rules.
- Change passwords that may be compromised; use a unique password for each account.
- Enable multifactor authentication or passkeys and review enrolled methods.
- Review signed-in devices and end unrecognized sessions.
- Check location sharing, family accounts, shared albums and connected applications.
- Install operating system and app security updates.
- Save suspicious alerts, dates, screenshots and messages safely. Seek guidance before erasing potential evidence.
These steps help reduce risk but cannot establish that hacking happened or identify who was responsible.
Avoid fake technical support and hacker-removal scams
Never give someone your password, authentication code or remote control of your computer because of an unsolicited call, email or browser pop-up. Be skeptical of anyone who guarantees they can identify a hacker. The FTC has guidance on tech-support scams.
When should you report the problem?
For threats, stalking, extortion, identity theft or financial fraud, consider a victim advocate, law enforcement, an attorney or a qualified consumer digital forensics professional. For identity theft recovery in the U.S., see IdentityTheft.gov.
Does Framework Security investigate personal hacking concerns?
Framework Security provides cybersecurity consulting to businesses and organizations. We do not provide personal account recovery, consumer phone diagnostics, spyware-removal services or investigations of family and relationship disputes.
We publish this resource to help people reach the appropriate official support providers and safety resources. Start with your account or device vendor rather than a business cybersecurity consultancy.
This is general educational information, not individualized cybersecurity, legal or emergency advice.
Talk With A Cybersecurity Expert
Bring the deadline you're staring at, the framework you're being held to, and the team you have. In 30 minutes we'll tell you honestly whether we're the right fit — and if we are, what the first two weeks look like.
Book a working session
